ROOT-OS-DEBIAN-11-CVE-2026-34589
- Source
- https://root.io/security/ROOT-OS-DEBIAN-11-CVE-2026-34589
- Import Source
- https://api.root.io/external/osv/ROOT-OS-DEBIAN-11-CVE-2026-34589.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/ROOT-OS-DEBIAN-11-CVE-2026-34589
- Upstream
- Published
- 2026-09-02T12:13:16Z
- Modified
- 2026-09-02T14:00:15Z
- Severity
-
- 5.0 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- CVE-2026-34589 in openexr - Patched by Root
- Details
-
Root has patched CVE-2026-34589 in the openexr package for Root:Debian:11. Multiple fixed versions available.
- Database specific
{ "distro": "debian", "distro_version": "11", "severity": "MEDIUM", "source": "Root" }
Affected packages
Root:Debian:11 / openexr
Package
- Name
- openexr
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed2.5.4-2+deb11u1.aikido.17Fixed2.5.4-2+deb11u1.aikido.16Fixed2.5.4-2+deb11u1.root.io.15Fixed2.5.4-2+deb11u1.aikido.18
Database specific
all_fixed_versions
[
"2.5.4-2+deb11u1.aikido.17",
"2.5.4-2+deb11u1.aikido.16",
"2.5.4-2+deb11u1.root.io.15",
"2.5.4-2+deb11u1.aikido.18"
]
root_patch_version
"aikido.18"
root_patched
true
source
"https://api.root.io/external/osv/ROOT-OS-DEBIAN-11-CVE-2026-34589.json"
total_fixed_versions
4
upstream_version
"2.5.4-2+deb11u1"
Root:Debian:11 / rootio-openexr
Package
- Name
- rootio-openexr
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed2.5.4-2+deb11u1.aikido.17Fixed2.5.4-2+deb11u1.aikido.16Fixed2.5.4-2+deb11u1.root.io.15Fixed2.5.4-2+deb11u1.aikido.18
Database specific
all_fixed_versions
[
"2.5.4-2+deb11u1.aikido.17",
"2.5.4-2+deb11u1.aikido.16",
"2.5.4-2+deb11u1.root.io.15",
"2.5.4-2+deb11u1.aikido.18"
]
root_patch_version
"aikido.18"
root_patched
true
source
"https://api.root.io/external/osv/ROOT-OS-DEBIAN-11-CVE-2026-34589.json"
total_fixed_versions
4
upstream_version
"2.5.4-2+deb11u1"